Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/315F293AEEF411EF81CB7343762E951A.roa
File: 315F293AEEF411EF81CB7343762E951A.roa (raw, json)
Hash identifier: V4KjGZgIPKcP1/MjXCNEypEICjJinDEh0PjdL2zARpk=
Subject key identifier: 82:24:C4:1D:81:08:40:9D:88:BC:DA:2C:97:76:59:47:47:7F:16:F7
Certificate issuer: /CN=F3690C51AR/serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Certificate serial: 6A
Authority key identifier: 1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
Authority info access: rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/315F293AEEF411EF81CB7343762E951A.roa
Signing time: Wed 19 Feb 2025 19:03:24 +0000
ROA not before: Wed 19 Feb 2025 19:03:13 +0000
ROA not after: Tue 28 Feb 2045 19:03:13 +0000
asID: 328045
IP address blocks: 160.119.80.0/24 maxlen: 24
160.119.81.0/24 maxlen: 24
160.119.82.0/24 maxlen: 24
160.119.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AR, serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Validity
Not Before: Feb 19 19:03:13 2025 GMT
Not After : Feb 28 19:03:13 2045 GMT
Subject: CN=67b62afc-975c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:58:6a:85:c2:9a:47:1c:2f:1c:aa:52:3c:bd:
ef:19:e4:e6:04:93:03:b5:97:78:db:6f:a0:1a:42:
73:50:0f:fc:97:51:24:3e:8f:4b:04:8c:30:cb:7e:
d3:d0:f6:6a:36:b8:37:ab:f1:0e:ca:b3:7f:0b:d8:
04:f2:1c:a9:83:74:21:36:1c:77:88:20:49:16:07:
06:dc:0a:96:b5:c5:22:69:4a:9f:48:f9:b0:e4:27:
52:0d:0a:58:27:67:55:8e:0d:29:cf:9c:00:66:f6:
d2:9d:ff:03:07:a1:41:fb:e4:b7:db:78:3a:4a:3f:
0b:59:b1:4d:5c:d5:7a:78:bc:89:6e:21:04:56:6b:
8c:b5:2b:cb:f0:b7:a6:2b:a0:07:70:4e:00:ab:30:
e2:79:0c:57:43:c4:3b:e5:5c:57:57:33:cb:65:60:
95:02:7b:cf:cb:90:db:41:48:7d:33:98:c5:06:b5:
6e:09:5a:bf:e2:eb:cc:be:0c:85:66:bd:ac:af:94:
2a:23:45:24:07:ae:9a:09:8d:ac:56:19:58:ef:74:
12:81:02:f2:ca:ab:e9:b9:dc:ae:ce:6e:3c:4a:cd:
ad:c9:f7:cc:cd:3a:4d:e7:17:ab:0f:af:50:45:a1:
33:c8:e2:58:7e:6a:cc:f0:d4:25:11:b7:45:fd:a6:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:24:C4:1D:81:08:40:9D:88:BC:DA:2C:97:76:59:47:47:7F:16:F7
X509v3 Authority Key Identifier:
keyid:1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/315F293AEEF411EF81CB7343762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.80.0/22
Signature Algorithm: sha256WithRSAEncryption
45:49:ba:01:58:f3:88:95:46:dc:8f:03:48:39:fe:17:cc:0e:
e6:56:72:d7:99:e2:d6:48:70:ec:70:04:9c:50:9e:9c:ae:3e:
e7:2a:bb:da:dc:59:1e:ad:47:81:c0:40:75:7a:1b:57:c4:60:
1f:64:ac:4b:88:e9:71:1e:8f:8d:eb:f5:a2:1f:85:95:9c:2f:
11:ea:45:fa:98:1c:f7:83:ca:56:4c:3c:da:43:84:3b:b7:b5:
1a:b7:44:7f:fb:d2:ea:2f:ce:90:a6:49:9f:4a:c2:2f:e8:b9:
b1:f6:cc:06:d5:78:d5:d2:62:62:81:80:ac:4d:d6:61:98:69:
9d:06:86:4d:cf:92:c9:c0:50:b7:ee:40:21:79:d7:b8:eb:61:
9d:08:d4:5c:09:41:b0:ad:85:14:fa:6f:3a:6a:74:04:c5:ac:
97:8a:a8:4c:47:a9:20:d3:8c:f8:02:50:8d:44:70:fe:1b:66:
f6:50:62:e4:d3:57:e8:90:9f:38:5e:3f:20:cd:dd:83:79:b9:
7c:d9:85:74:c2:d2:61:43:88:f7:6c:a2:99:98:08:35:ed:f0:
74:9c:c2:ef:5b:da:14:42:97:d0:38:5c:09:db:c0:84:33:96:
61:c7:7f:cb:a7:fe:0f:8a:61:58:73:ec:b1:ee:b4:90:57:bd:
33:2b:7a:38
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBajANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
MEM1MUFSMTEwLwYDVQQFEygxRDY3MzhEM0JGQzYxMUQ4N0RGMERFNzQwM0QyNURB
MEY2NEVCMUUwMB4XDTI1MDIxOTE5MDMxM1oXDTQ1MDIyODE5MDMxM1owGDEWMBQG
A1UEAxMNNjdiNjJhZmMtOTc1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAORYaoXCmkccLxyqUjy97xnk5gSTA7WXeNtvoBpCc1AP/JdRJD6PSwSMMMt+
09D2aja4N6vxDsqzfwvYBPIcqYN0ITYcd4ggSRYHBtwKlrXFImlKn0j5sOQnUg0K
WCdnVY4NKc+cAGb20p3/AwehQfvkt9t4Oko/C1mxTVzVeni8iW4hBFZrjLUry/C3
piugB3BOAKsw4nkMV0PEO+VcV1czy2VglQJ7z8uQ20FIfTOYxQa1bglav+LrzL4M
hWa9rK+UKiNFJAeumgmNrFYZWO90EoEC8sqr6bncrs5uPErNrcn3zM06TecXqw+v
UEWhM8jiWH5qzPDUJRG3Rf2mLWkCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSCJMQd
gQhAnYi82iyXdllHR38W9zAfBgNVHSMEGDAWgBQdZzjTv8YR2H3w3nQD0l2g9k6x
4DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTBDNTEvQzc0MkYzODZBNjdGMTFFRkJBNTQ2MDgyNzYyRTk1MUEvSFdjNDA3
X0dFZGg5OE41MEE5SmRvUFpPc2VBLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SFdjNDA3X0dFZGg5OE41MEE5SmRvUFpPc2VBLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTBDNTEvQzc0MkYzODZBNjdGMTFFRkJBNTQ2MDgyNzYyRTk1
MUEvMzE1RjI5M0FFRUY0MTFFRjgxQ0I3MzQzNzYyRTk1MUEucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqB3UDANBgkqhkiG9w0BAQsFAAOC
AQEARUm6AVjziJVG3I8DSDn+F8wO5lZy15ni1khw7HAEnFCenK4+5yq72txZHq1H
gcBAdXobV8RgH2SsS4jpcR6Pjev1oh+FlZwvEepF+pgc94PKVkw82kOEO7e1GrdE
f/vS6i/OkKZJn0rCL+i5sfbMBtV41dJiYoGArE3WYZhpnQaGTc+SycBQt+5AIXnX
uOthnQjUXAlBsK2FFPpvOmp0BMWsl4qoTEepINOM+AJQjURw/htm9lBi5NNX6JCf
OF4/IM3dg3m5fNmFdMLSYUOI92yimZgINe3wdJzC71vaFEKX0DhcCdvAhDOWYcd/
y6f+D4phWHPsse60kFe9Myt6OA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:33 2025 by rpki-client on console.sobornost.net